Added a query-related known issue for Microsoft.Cdn/CdnWebApplicationFirewallPolicies and fixed some bullet formatting issues (#1292)

Author: shanhix1

README.md

@@ -117,16 +117,14 @@ Currently, there is no plan to change this behavior for the above Microsoft.Web
   - The routeTable property of this type is populated differently when queried than when created or updated unless non-standard parameters are provided. This means deny policies will work, but compliance audits will generally not be correct.
 - Microsoft.Insights/workbooks
   - The collection GET API call for this type doesn't return all workbooks, which could result in some or all workbook resources being incorrectly flagged as non-compliant.
--Microsoft.Maintenance/configurationAssignments
+- Microsoft.Maintenance/configurationAssignments
   - This type does not support LIST API which does not allow for compliance results to be populated.
--Microsoft.Maintenance/applyUpdates
+- Microsoft.Maintenance/applyUpdates
   - This type does not support LIST API which does not allow for compliance results to be populated.
-Microsoft.Cdn/CdnWebApplicationFirewallPolicies
+- Microsoft.Cdn/CdnWebApplicationFirewallPolicies
+  - This type does not support LIST API which does not allow for compliance results to be populated. This type also does not support GET API calls at a subscription level which can lead to incorrect compliance results over time.
+- Microsoft.EventGrid/eventSubscriptions
   - This type does not support LIST API which does not allow for compliance results to be populated.
-Microsoft.EventGrid/eventSubscriptions
-- This type does not support LIST API which does not allow for compliance results to be populated.
-
-
 
 ### Resource Type not correctly published by resource provider